2 Replies to “Brief conversation about disk encryption”

  1. Isn’t disk encryption rather pointless when the most crucial part of an OS, the kernel + modules are unencrypted somewhere on the disk?

    Unless you have verified exec or signed kmods or smth like that…

  2. This depends on your thread model. If you just want to protect a powered down lost/stolen computer than it works. If $spyAgency sends a evil maid to change your bootloader into keylogger than you’re screwed.

Comments are closed.

Your post must include a link to this post.

How does this work?
Write a response on your own website and include a link to this post. Then submit your response’s URL here. Your response may appear here after moderation. To update or remove it, edit or delete your original post and submit the same URL again. Learn more about Webmentions.